{"id":"CVE-2026-115712","aliases":[],"cve":{"records":[{"id":"CVE-2026-115712","source":"elastic","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-23T11:09:48.309Z","published":"2026-10-29T14:10:06.580Z","modified":"2026-10-29T16:49:21.112Z"}],"publishers":[{"name":"elastic","role":"CNA","organizationId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","modified":"2026-10-29T14:10:06.580Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-29T16:49:21.112Z"}],"references":[{"url":"https://discuss.elastic.co/t/elastic-cloud-enterprise-ece-3-8-6-and-4-2-1-security-update-esa-2026-221/391265","tags":[],"source":"elastic"}],"weaknesses":[{"id":"CWE-863","description":"CWE-863 Incorrect Authorization","source":"elastic"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-29T14:38:05.538290Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Incorrect Authorization in Elastic Cloud Enterprise (ECE) Leading to Unauthorized Modification of Platform Settings","titleSource":"elastic","descriptionSource":"elastic","description":"Incorrect Authorization (CWE-863) in Elastic Cloud Enterprise (ECE) can lead to unauthorized modification of platform-level settings via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user with read-only access to the platform can change an installation-wide account setting that only platform administrators are permitted to change.","score":4.3,"severity":"medium","published":"2026-10-29T14:10:06.580Z","modified":"2026-10-29T16:49:21.112Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Elastic","name":"Elastic Cloud Enterprise","platforms":[],"versions":[{"version":"3.8.0","status":"affected","lessThanOrEqual":"3.8.5","versionType":"semver"},{"version":"4.0.0","status":"affected","lessThanOrEqual":"4.2.0","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"elastic","url":"https://www.cve.org/CVERecord?id=CVE-2026-115712"}],"remediation":[],"references":["https://discuss.elastic.co/t/elastic-cloud-enterprise-ece-3-8-6-and-4-2-1-security-update-esa-2026-221/391265"],"sources":[{"name":"CVE","id":"CVE-2026-115712","modified":"2026-10-29T16:49:21.112Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-115712"}],"assessments":[{"source":"elastic","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","score":4.3}],"sourceAffected":[],"observedAt":"2026-10-29T17:12:03.370Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T06:30:31.757Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-30T09:50:32.779Z","attemptedAt":"2026-10-30T09:50:32.779Z"},{"source":"GHSA","status":"available","checkedAt":"2026-10-30T09:50:32.840Z","attemptedAt":"2026-10-30T09:50:32.840Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-30T09:50:32.912Z","attemptedAt":"2026-10-30T09:50:32.912Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-30T09:50:32.030Z","attemptedAt":"2026-10-30T09:50:32.030Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-115712","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115712","modified":"2026-10-29T17:18:01.623","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","checkedAt":"2026-10-30T09:50:32.779Z"},{"source":"GitHub Advisory Database","id":"GHSA-9p96-w72r-87vh","url":"https://github.com/advisories/GHSA-9p96-w72r-87vh","modified":"2026-10-29T15:31:00Z","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","checkedAt":"2026-10-30T09:50:32.840Z"},{"source":"ENISA EUVD","id":"EUVD-2026-112924","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-112924","modified":"Oct 29, 2026, 4:49:21 PM","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","checkedAt":"2026-10-30T09:50:32.912Z"}],"aiSummary":{"text":"Elastic Cloud Enterprise (ECE) versions 3.8.0 to 3.8.5 and 4.0.0 to 4.2.0 have an incorrect authorization weakness, allowing authenticated read-only users to modify platform settings. An attacker with read-only access can change installation-wide account settings.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:57:51.720Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-115712"}]}}